$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/00ec6797-c193-3963-ab04-5ccf20b134ad.roa File: 00ec6797-c193-3963-ab04-5ccf20b134ad.roa (raw, json) Hash identifier: WQ5SeVnyGNPkvawY0HWBOM51JcBhLUnzynAb9t+9Z9Y= Subject key identifier: 3E:6E:B9:08:9E:34:6F:FC:D0:10:87:72:0F:9D:B1:8C:3D:AE:57:4B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AF0F158D2F256BA4C04D57D30 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/00ec6797-c193-3963-ab04-5ccf20b134ad.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 396566 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:58:d2:f2:56:ba:4c:04:d5:7d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=32a6ec3a-0d12-447e-9fff-595ac32d26f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f5:02:66:d1:41:b0:b4:55:10:10:26:75:d7: 7a:42:64:08:d1:97:1f:e9:01:4c:20:0e:4a:b8:70: 96:c8:69:63:88:8a:31:45:08:96:1d:5e:73:2f:00: 65:b8:42:5d:74:56:f2:dc:49:2c:99:d5:43:58:d2: 4f:6c:ca:a5:15:d2:bd:08:d2:55:db:d1:d1:14:53: 38:9f:15:6f:f1:8c:55:d3:e3:c9:b4:fd:f2:50:0b: 48:b6:a3:68:e9:71:b5:a4:72:75:77:48:c5:ea:36: d1:75:f8:fb:d6:de:f8:39:01:02:f8:6a:7c:f2:e9: 87:74:bb:1d:fa:2a:2d:bb:4d:6d:53:1f:72:fc:62: 7a:77:3e:22:d4:9e:42:d2:94:94:63:f3:7a:26:d6: 79:1f:4e:2f:0a:a6:40:59:d2:63:b0:d3:0a:62:47: e0:b4:0b:3f:d0:40:cf:1c:b4:99:40:f2:f6:83:f0: 68:63:3b:66:65:49:12:50:4c:c2:68:ea:d8:74:fe: 35:7c:3a:2a:b7:40:45:97:a6:54:e1:37:fc:48:a1: ea:a2:36:ed:90:0c:3d:0f:76:e8:e6:7f:04:07:49: f9:03:64:c8:4a:a0:51:96:29:44:68:71:11:47:f9: 4d:fc:1b:1e:45:52:fd:93:be:73:3f:27:ef:8d:e9: 84:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6E:B9:08:9E:34:6F:FC:D0:10:87:72:0F:9D:B1:8C:3D:AE:57:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/00ec6797-c193-3963-ab04-5ccf20b134ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:1f:7c:5a:5e:b5:a0:d2:4c:6b:d9:30:6f:0f:3c:53:b0:a6: b3:b2:cb:9d:21:72:57:9e:93:ef:48:38:32:8b:53:f7:76:f6: ab:6c:ed:99:66:60:fc:c1:3a:6c:4c:7e:c6:0e:49:f3:f9:43: e4:04:56:b8:66:17:a6:12:89:8b:32:b3:40:c8:d9:66:03:a3: 87:19:c1:ee:75:52:ba:dc:73:7b:9d:33:62:25:53:02:bf:57: 48:0c:39:03:96:6c:c5:bb:8a:3d:c1:89:66:1d:45:8b:33:7e: eb:98:44:bc:99:4e:1e:f9:20:a1:26:65:cf:ea:ba:24:08:f6: e6:f3:4e:86:c8:a6:50:f6:4a:ed:b8:db:8d:da:f5:0e:58:ef: 7d:47:a8:a0:99:a7:ae:0e:c6:c2:68:93:c9:d9:fc:af:3a:18: b6:9b:16:8d:d0:17:10:48:ba:4b:32:be:7a:78:3d:87:b4:77: 14:e0:dd:6a:d1:53:99:a3:75:6b:94:aa:39:e4:b9:a7:55:ac: 61:b1:b3:19:df:66:6a:db:02:ee:b4:f4:b1:f2:e4:f3:5a:ac: a9:03:61:29:8e:6b:99:49:cb:ce:a7:58:7e:f7:d0:90:0e:3c: 3a:66:35:c6:1f:e3:cb:3b:24:d5:bf:49:87:6f:b3:b6:0b:04: c6:a3:11:59 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErw8VjS8la6TATVfTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk MzJhNmVjM2EtMGQxMi00NDdlLTlmZmYtNTk1YWMzMmQyNmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPUCZtFBsLRVEBAmddd6QmQI0Zcf6QFMIA5K uHCWyGljiIoxRQiWHV5zLwBluEJddFby3EksmdVDWNJPbMqlFdK9CNJV29HRFFM4 nxVv8YxV0+PJtP3yUAtItqNo6XG1pHJ1d0jF6jbRdfj71t74OQEC+Gp88umHdLsd +iotu01tUx9y/GJ6dz4i1J5C0pSUY/N6JtZ5H04vCqZAWdJjsNMKYkfgtAs/0EDP HLSZQPL2g/BoYztmZUkSUEzCaOrYdP41fDoqt0BFl6ZU4Tf8SKHqojbtkAw9D3bo 5n8EB0n5A2TISqBRlilEaHERR/lN/BseRVL9k75zPyfvjemEOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD5uuQieNG/80BCHcg+dsYw9rldLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDBlYzY3OTctYzE5My0z OTYzLWFiMDQtNWNjZjIwYjEzNGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACEffFpetaDSTGvZMG8PPFOwprOyy50hcleek+9IODKLU/d29qts 7ZlmYPzBOmxMfsYOSfP5Q+QEVrhmF6YSiYsys0DI2WYDo4cZwe51Urrcc3udM2Il UwK/V0gMOQOWbMW7ij3BiWYdRYszfuuYRLyZTh75IKEmZc/quiQI9ubzTobIplD2 Su24243a9Q5Y731HqKCZp64OxsJok8nZ/K86GLabFo3QFxBIuksyvnp4PYe0dxTg 3WrRU5mjdWuUqjnkuadVrGGxsxnfZmrbAu609LHy5PNarKkDYSmOa5lJy86nWH73 0JAOPDpmNcYf48s7JNW/SYdvs7YLBMajEVk= -----END CERTIFICATE-----Generated at Sat Aug 23 13:14:47 2025 by rpki-client